Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: 8klUGJimJHdOMgstmQD18VvuyTZ37YKLLKKYIQIZy0E=
Subject key identifier: 29:3E:7C:29:1C:33:FD:CE:44:1C:F1:6A:88:51:2E:5D:FD:3D:04:EC
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 0198D515EE071E306BB9494F8A8393284A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: TtI0zBZ/ha+sUS0TacdM8c3WBPs5BXrbLPsDMzO4t6w=)
2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ee:07:1e:30:6b:b9:49:4f:8a:83:93:28:4a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=293e7c291c33fdce441cf16a88512e5dfd3d04ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:26:d5:ee:2a:95:a4:a0:af:38:eb:45:44:
58:1d:91:4a:54:db:e9:ed:63:7a:9a:8d:91:10:b6:
3d:59:f5:1b:2c:1f:b9:bd:ed:52:eb:41:6c:45:76:
d3:08:7f:09:35:d2:d8:37:73:4e:da:65:d1:fc:75:
d8:96:e7:62:7b:77:5e:cc:76:cf:b3:ab:04:ef:03:
3b:56:e8:43:f1:59:55:d9:e4:f8:fe:37:cc:49:3c:
5d:87:2b:74:9b:5d:8c:0d:29:f1:72:89:21:23:60:
1d:54:c9:4c:bf:4e:46:c9:74:a4:a5:f8:e3:5a:63:
55:3f:45:a6:1b:17:68:10:0f:7c:b9:6a:ac:b2:b9:
aa:c5:2f:9b:ab:39:3f:dd:db:a0:b3:77:7d:2c:78:
f8:c1:b0:79:fe:25:5d:50:36:70:2e:98:6c:b7:e2:
cf:38:7a:d3:70:ec:93:1a:2e:8b:b5:c2:ee:de:85:
48:34:a4:07:9d:34:1a:29:80:7c:d8:b4:78:1e:0d:
e9:a5:76:2e:a7:f4:61:11:0e:40:97:bc:a2:c9:6d:
64:90:c2:e7:83:12:b4:cf:46:73:4b:31:d9:4c:fc:
ed:c4:63:af:d1:e9:0f:84:c2:ba:2e:33:ea:51:16:
23:5a:bd:fb:31:51:01:b3:9d:81:6d:67:61:52:60:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3E:7C:29:1C:33:FD:CE:44:1C:F1:6A:88:51:2E:5D:FD:3D:04:EC
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5a:39:95:9d:93:69:0b:ba:4f:c8:60:c0:23:9d:b0:16:26:
7d:30:4a:eb:8c:2d:d1:0a:92:e4:d5:f8:4f:00:12:0d:b2:6b:
12:4b:43:62:f9:ce:1f:4c:58:8e:59:6b:cc:f4:c4:73:f2:8f:
36:e4:24:0d:f6:a5:17:54:85:bb:d8:df:38:ff:94:9a:46:26:
43:42:1f:97:cb:da:5d:93:9d:1a:cd:34:f7:cb:1e:a4:51:7b:
82:40:d0:25:ef:2c:09:62:be:5e:b1:79:b5:90:52:f0:1b:f6:
b8:be:a6:08:8c:dc:3c:e9:9e:1c:e1:59:69:09:b2:24:91:e8:
af:12:a3:f7:22:e6:cd:ac:fe:9b:fc:af:f2:01:1b:e8:7f:30:
6d:e4:1b:b7:6c:14:c7:7f:ab:91:6d:2a:90:65:02:18:87:f5:
3f:6f:b2:bc:6c:86:6d:ce:27:73:8b:43:17:1d:56:77:90:0c:
a5:07:90:b6:e5:d2:78:df:5a:74:47:fc:6e:e8:4b:6a:3c:03:
52:97:18:41:43:c0:b6:48:e4:9d:10:29:aa:2e:0d:27:87:05:
98:b1:04:c9:1f:84:1b:31:c3:fc:39:a9:c0:93:ee:74:1f:b6:
63:dd:26:61:e9:86:3d:34:e4:33:a2:6b:6d:78:13:e3:15:c0:
8e:4a:26:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFe4HHjBruUlPioOTKEoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlN2YyMmJlZWI1MmM2ZTUxYTI0MjJiMTM5MTQyZWVhMDNm
YjVkNGQwHhcNMjUwODIzMDQwMDQwWhcNMjUwODI0MDQwMDQwWjAzMTEwLwYDVQQD
EygyOTNlN2MyOTFjMzNmZGNlNDQxY2YxNmE4ODUxMmU1ZGZkM2QwNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVUm1e4qlaSgrzjrRURYHZFKVNvp
7WN6mo2RELY9WfUbLB+5ve1S60FsRXbTCH8JNdLYN3NO2mXR/HXYludie3dezHbP
s6sE7wM7VuhD8VlV2eT4/jfMSTxdhyt0m12MDSnxcokhI2AdVMlMv05GyXSkpfjj
WmNVP0WmGxdoEA98uWqssrmqxS+bqzk/3dugs3d9LHj4wbB5/iVdUDZwLphst+LP
OHrTcOyTGi6LtcLu3oVINKQHnTQaKYB82LR4Hg3ppXYup/RhEQ5Al7yiyW1kkMLn
gxK0z0ZzSzHZTPztxGOv0ekPhMK6LjPqURYjWr37MVEBs52BbWdhUmAD0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk+fCkcM/3ORBzxaohRLl39PQTsMB8GA1UdIwQY
MBaAFG5/Ir7rUsblGiQisTkULuoD+11NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUt
NGRkNGQwZjUzODQ5LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUtNGRkNGQwZjUzODQ5
LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlo5lZ2T
aQu6T8hgwCOdsBYmfTBK64wt0QqS5NX4TwASDbJrEktDYvnOH0xYjllrzPTEc/KP
NuQkDfalF1SFu9jfOP+UmkYmQ0Ifl8vaXZOdGs0098sepFF7gkDQJe8sCWK+XrF5
tZBS8Bv2uL6mCIzcPOmeHOFZaQmyJJHorxKj9yLmzaz+m/yv8gEb6H8wbeQbt2wU
x3+rkW0qkGUCGIf1P2+yvGyGbc4nc4tDFx1Wd5AMpQeQtuXSeN9adEf8buhLajwD
UpcYQUPAtkjknRApqi4NJ4cFmLEEyR+EGzHD/DmpwJPudB+2Y90mYemGPTTkM6Jr
bXgT4xXAjkomlg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:21 2025 by rpki-client